Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
File: vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft (raw, json)
Hash identifier: uw5RQ4tobhL+nWa63ztebNOPX3xIBYp44qwcF4hQyhQ=
Subject key identifier: D5:11:8F:11:67:38:EE:91:4E:42:67:AA:AF:FD:B8:42:EB:37:FB:02
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 01A0CDECC666BE05367CF4ACDAC742FB75D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 11:00:41 +0000
Manifest this update: Wed 23 Sep 2026 11:00:41 +0000
Manifest next update: Thu 24 Sep 2026 11:00:41 +0000
Files and hashes: 1: AU8OktUluDemDAVdWC4o1rs1CnY.roa (hash: RjEeTRpnG44Tfxlx6Pp88uWbFbQRVFzej/AZva1uDPU=)
2: Xwqqp3SPpvDNyBAEMp0e_66cQro.roa (hash: tn/0MbER8l+l1ARfId/kyPTPuy7cjy7LSRHD6/peBik=)
3: vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl (hash: Z8lQfAaURzDHYq/P3yFwSFLag73vnT+Zxi9shmsyxbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:c6:66:be:05:36:7c:f4:ac:da:c7:42:fb:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Sep 23 11:00:41 2026 GMT
Not After : Sep 24 11:00:41 2026 GMT
Subject: CN=d5118f116738ee914e4267aaaffdb842eb37fb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:f8:34:03:56:71:37:a9:0e:4a:41:1c:e0:
0f:e1:63:ac:e2:89:32:2d:bc:67:66:aa:01:c8:81:
f9:62:17:e3:b7:b4:16:61:c8:cf:ca:ca:57:ba:43:
66:3d:bc:fb:94:e6:97:81:10:4c:53:57:1e:45:16:
20:a4:d1:7e:f5:c3:a3:2b:27:9a:e6:a7:64:ab:7e:
73:05:dd:99:83:a6:10:3d:4c:7e:9d:fc:4e:ff:42:
af:17:84:11:f5:b4:83:91:b8:0b:80:0d:5c:1e:dc:
49:f4:91:4f:36:dd:90:83:94:8a:ab:7c:86:7d:0a:
de:0f:62:d9:d8:83:19:1f:ae:0e:a9:13:11:ce:ee:
b6:b5:79:29:f5:f2:bd:6a:57:c9:fc:47:bf:b3:2d:
46:ff:8a:25:7e:23:62:22:23:9b:70:e2:83:24:31:
4e:7f:6c:8a:30:cf:3c:d7:68:56:ac:5d:62:c5:39:
8e:56:ec:11:dd:91:1a:ec:17:ba:e8:02:7c:a9:4c:
9c:40:bf:f3:05:3d:e1:bd:2f:47:78:ee:58:f4:c9:
44:61:b3:e2:8b:e6:19:3f:38:21:2d:30:f9:1c:82:
6c:b9:0c:73:c7:b3:43:96:08:0c:12:1a:c6:10:5f:
a0:e5:10:ac:ad:c6:78:16:c2:85:65:02:27:d4:f4:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:8F:11:67:38:EE:91:4E:42:67:AA:AF:FD:B8:42:EB:37:FB:02
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:8e:14:ad:61:86:05:77:14:67:64:9d:6e:03:89:1e:2b:
6b:e4:ca:63:8d:3a:65:d2:fb:a4:00:8d:c3:83:93:1e:97:29:
ce:47:1a:18:e8:61:f9:ae:32:4e:2a:8d:13:27:73:28:37:4b:
a4:89:d9:b4:86:ac:96:20:a2:bb:49:d6:d3:d5:03:1a:83:5d:
d8:aa:d5:6b:35:a6:dd:c9:a8:28:da:c5:53:83:54:4d:7c:73:
38:29:2d:94:ee:3d:43:78:6c:61:e6:18:de:25:f5:e7:81:b8:
46:ce:8a:fc:fc:cf:17:6e:df:46:99:3b:30:c4:69:46:ef:0d:
9c:03:9a:d3:f7:5e:37:6b:b9:38:2e:84:cc:0e:dc:fd:cf:24:
16:b6:ff:e4:ff:ab:58:89:4b:b8:f1:4d:0b:5c:4d:63:6e:ed:
58:19:cc:a0:cd:09:8a:bd:02:94:3f:4b:a1:69:a9:6a:4d:91:
3e:aa:c9:22:eb:aa:af:99:0d:48:34:4c:61:2a:01:54:66:1c:
50:85:4f:ff:7f:40:6b:bb:0b:db:e1:8c:b7:49:f8:7e:94:3e:
8b:96:cc:6b:a7:48:ae:5b:a8:a6:60:1b:d7:fc:97:fc:a8:4b:
44:98:1d:f2:ab:a0:59:e6:45:a3:6a:4a:cb:b1:26:64:13:7f:
bb:7a:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:59:55 2026 by rpki-client